
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/3130332e3136332e3130322e302f32342d3234203d3e20313431363733.roa
File: 3130332e3136332e3130322e302f32342d3234203d3e20313431363733.roa (raw, json)
Hash identifier: h1TE3m56WQ+gTVyqOOSf1UTeQzb1azE9LGSpzK549vA=
Subject key identifier: 05:2A:1B:2A:35:57:41:5A:65:0A:BD:77:DA:A5:D3:C7:13:60:2B:12
Certificate issuer: /CN=A8B4290DB1D500117291858DAF1B1EDF11D478CF
Certificate serial: 5969F43D5877A54DE47BD3D3D81A8DAB21E400B6
Authority key identifier: A8:B4:29:0D:B1:D5:00:11:72:91:85:8D:AF:1B:1E:DF:11:D4:78:CF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B4290DB1D500117291858DAF1B1EDF11D478CF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/3130332e3136332e3130322e302f32342d3234203d3e20313431363733.roa
Signing time: Sun 03 May 2026 02:12:45 +0000
ROA not before: Sun 03 May 2026 02:07:45 +0000
ROA not after: Sun 02 May 2027 02:12:45 +0000
asID: 141673
IP address blocks: 103.163.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.crl
rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B4290DB1D500117291858DAF1B1EDF11D478CF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:46:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:69:f4:3d:58:77:a5:4d:e4:7b:d3:d3:d8:1a:8d:ab:21:e4:00:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8B4290DB1D500117291858DAF1B1EDF11D478CF
Validity
Not Before: May 3 02:07:45 2026 GMT
Not After : May 2 02:12:45 2027 GMT
Subject: CN=052A1B2A3557415A650ABD77DAA5D3C713602B12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d0:1f:37:da:eb:f9:df:3f:8f:d4:cf:1f:b8:
9a:94:7e:2d:20:3a:54:92:be:17:15:04:ad:d6:bf:
4b:fb:dc:54:ae:eb:8f:92:83:24:ef:27:21:12:19:
c2:0d:f0:bd:58:36:d6:0f:5c:ee:c4:aa:71:56:af:
b2:99:fd:74:a0:29:8f:c0:a3:4c:45:14:2a:92:ca:
0c:c8:1f:e0:21:00:2a:e1:e5:66:4e:6f:de:1d:0a:
1e:73:b0:c8:21:b6:51:9d:b8:f5:c3:48:f3:4a:fa:
b2:73:13:59:06:31:38:0c:b2:d7:8e:ed:cc:5e:4a:
a6:64:dd:a6:b8:28:ad:02:12:f3:47:90:55:25:c0:
e7:e5:30:c7:53:28:88:ba:61:ee:e1:93:a5:e7:25:
d5:76:9c:d9:0e:6b:8d:db:ec:a6:8b:4a:ff:56:7d:
32:65:0c:c5:f1:96:09:ee:50:cc:ce:82:67:ed:b9:
a4:2a:22:04:ee:e8:36:68:29:a5:ad:f1:5c:05:d2:
b6:31:66:aa:16:49:92:fa:7a:31:9a:75:7f:b4:53:
a5:da:45:b3:59:af:11:9d:e0:53:1e:05:8c:67:20:
29:63:72:dc:5d:c3:f2:33:d0:cc:28:32:4d:ef:34:
83:e2:ff:15:84:63:6f:8d:e4:63:41:36:1a:0c:c9:
f3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:2A:1B:2A:35:57:41:5A:65:0A:BD:77:DA:A5:D3:C7:13:60:2B:12
X509v3 Authority Key Identifier:
keyid:A8:B4:29:0D:B1:D5:00:11:72:91:85:8D:AF:1B:1E:DF:11:D4:78:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B4290DB1D500117291858DAF1B1EDF11D478CF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/3130332e3136332e3130322e302f32342d3234203d3e20313431363733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.163.102.0/24
Signature Algorithm: sha256WithRSAEncryption
49:56:af:ba:9d:12:c7:15:5d:02:14:bc:e3:47:62:a7:43:b2:
de:57:25:d7:e2:a3:5d:1d:8d:bc:3b:2c:8b:b5:09:fc:c5:11:
90:cd:e3:c5:df:e9:8c:ad:8e:9c:23:93:78:02:df:35:a4:44:
58:5c:5d:3f:59:ec:4e:f7:45:66:92:4c:24:1e:2c:bb:3b:5a:
82:a0:89:bd:f2:b0:bb:f0:05:26:dd:96:41:50:b7:37:2e:ed:
c1:98:c0:db:59:cc:a2:4f:55:65:c9:a3:86:47:ec:bb:cb:b1:
50:11:3c:12:30:fd:47:64:16:14:d3:69:2e:42:07:89:77:b3:
77:9d:33:a8:51:c9:f6:7e:ab:b3:3c:2c:0a:70:32:9f:ad:66:
d4:74:9d:68:af:4d:f7:6e:be:3b:26:1a:aa:c3:98:7a:9d:c0:
36:d6:31:07:56:ea:98:db:8f:a9:ef:33:13:43:86:61:a4:67:
35:14:0d:65:65:2d:9d:b4:44:f0:e5:84:48:19:f6:e9:70:39:
14:2d:f6:e6:98:fa:f7:13:f6:c6:46:5e:8d:f6:a8:5a:1e:ad:
03:82:92:c6:34:55:20:fe:ee:db:a3:35:19:89:b5:a0:89:01:
63:44:46:58:32:d1:31:1e:6a:2a:3d:96:c5:cd:69:f7:2e:05:
b3:1a:9f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:43:34 2026 by rpki-client